From b3bbc7c61f3fd164e94b7b3900028f5c47283172 Mon Sep 17 00:00:00 2001 From: laurentsimon Date: Sat, 13 Aug 2022 00:49:58 +0000 Subject: [PATCH] update --- docs/checks.md | 2 +- docs/checks/internal/checks.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/checks.md b/docs/checks.md index 00376af1b85e..fac2d3309c76 100644 --- a/docs/checks.md +++ b/docs/checks.md @@ -538,7 +538,7 @@ releases: [*.minisig](https://github.com/jedisct1/minisign), *.asc (pgp), *.sig, *.sign, *.intoto.jsonl. If signatures are found for the releases, a score of 8 is given. -If SLSA provenances are found for the releases, a maximum score of 10 is given. +If SLSA provenances are found for the releases, the maximum score of 10 is given. Note: The check does not verify the signatures. diff --git a/docs/checks/internal/checks.yaml b/docs/checks/internal/checks.yaml index dbce9e2ed9d5..6dd1c8da3559 100644 --- a/docs/checks/internal/checks.yaml +++ b/docs/checks/internal/checks.yaml @@ -585,7 +585,7 @@ checks: *.sig, *.sign, *.intoto.jsonl. If signatures are found for the releases, a score of 8 is given. - If SLSA provenances are found for the releases, a maximum score of 10 is given. + If SLSA provenances are found for the releases, the maximum score of 10 is given. Note: The check does not verify the signatures. remediation: